wordpress website create .htaccess files automatic in all folder

Likely they are created by your security plugin.
Something like “Prevent PHP execution in folders” setting.

Its shouldnt do anything bad, but improve security.

but it is created in wp admin folder wp includes and wp content folder thats why i cant open my dash bord withoud remove this file from wp admin folder. if i remove this file it is automatically created again with in 2 minutes and i again cant open my post or plugin section. Also my new plugin add portion is not showing and theme editor mode not showing .i remove all my plugin but errer is still what i do now? please help me

@axifhussain
Did you find the solution ?

I am having the same problem .

wordpress website create .htaccess files automatic in all folder
this is code How to solve this problem?

<FilesMatch “.(py|exe|php)$”>
Order allow,deny
Deny from all
</FilesMatch>
<FilesMatch “(about.php|radio.php|index.php|content.php|lock360.php)$”>
Order allow,deny
Allow from all
</FilesMatch>

@hamzasaadat567
It’s just a malware which creates .htaccess files.
What i did to resolve my problem is:

1. Installed the Wordfence Plugin
2. Scan the Website
3. I downloaded the fresh copy of the wordpress
4. Replace the wp-admin, wp-includes directory with the fresh copy
5. Updated all the plugins
6. Installed the Wordfence Plugin
7. Scan the Website again

I have the same problem, what I could notice is that it makes no difference if there is a wordpress website or not, even leaving empty public_html the .htaccess and index.php are generated automatically even with 444 permissions someone has been able to identify how to avoid it ?

thank you @mrkhanakia
i do your advice and my site back to normal state again.

Hi. My sites are all hosted on one machine and are experiencing the same issue as @hamzasaadat567. I’ve attempted @mrkhanakia , but they somehow still keep updating the htaccess file. Was there some other solution you figured out? This is real pain, and i’m wondering what I should do. Been debugging now for almost 8 hours. Please help, thank you in advance

@angel1384 Hey were you able to figure this out? I just barely tested your theory and noticed you were right! If I delete all files in the folder, it generatees “index.php” and .htaccess. Which are both causing issues.

If I create a new folder in my directory withh a clean install of wordpress the files aren’t generated? That’s strange….

What I ended up doing was…. I renamed my wordpress’ website directory and cleaned up the index.php file and .htaccess file. Renaming it made it so it wouldn’t get autogenerated anymore. I updated my hosting provider to point to the new directory and it worked! I then updated wordpress, all my plugins, and cleaned anything up wordfence told me to do.

What’s funny is if i keep the directory then the files keep getting generated. So anyways, I just deleted the directory and the directory doesn’t get re-created.

It seems this issue might be related to this: https://www.ads-software.com/support/topic/hacked-index-php-file-with-444-permissions-wont-stay-changed/

I’m not exactly sure because I didn’t test it out, but it seems probable. I ended up changing my passwords and locking things up a bit. Hopefully that’s okay and there are no scripts running on the server.

Thanks

@hossman333 Great you resolved the issue ??